AMENDMENTS TO THE CLAIMS 



1 . (Currently amended) A method for detection of server-like devices within 
a network, said detection method comprising the steps of 

determining a respective ingress to egress network traffic ratio for at least some of 
the devices, 

and selecting the server-like devices on the basis of each determined ratio or a 
figure derived from each determined ratio a 

wherein selecting the server-like devices includes selecting those devices having a 
value of said determined ratio above a selected value. 

said selected value providing a cut-off point beyond which all device are 
considered as exhibiting server-like behavior . 

2. (Previously presented) A method as claimed in claim 1 in which 
each server-like device is connected to a port of another device and the ingress to egress 
network traffic ratio is determined by determining network traffic through said port. 

3. (Original) A method as claimed in claim 2 in which said network 
traffic through said port is determined using SNMP. 

4. (Cancelled) 
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5. (Currently amended) A method as claimed in claimj_ [[4]] including the 
step of ranking the devices in order of their determined ratios. 

6. (Original) A method as claimed in claim 5 in which the selection of 
the server-like devices includes determining discontinuities in the values of the 
determined ratios of the ranked devices. 

7. (Previously presented) A method as claimed in claim 5 including 
the step of nominally plotting the determined ratios of the devices against the ranked 
devices and deriving a second derivative of a resulting ordered ratio graph, and using the 
second derivative to select the server-like devices. 

8. (Previously presented) A method as claimed in claim 6 including 
the step of nominally plotting the determined ratios of the devices against the ranked 
devices and deriving a third derivative of a resulting ordered ratio graph, and using 
second and third derivatives to select the server-like devices. 

9. (Original) A method as claimed in claim 8 including the step of using 
the second and third derivatives to divide the devices into groups and selecting one or 
more of the groups of devices as server-like devices. 
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10. (Previously presented) A method as claimed in claim 9 in which 
devices are divided into groups by determining boundaries of the groups as points where 
the second derivative is zero and the third derivative is less than zero. 

11. (Cancelled) 

12. (Previously presented) A computer program on a computer readable 
medium loadable into a digital computer, said computer program comprising software for 
performing the steps of claim 1 . 

13. (Cancelled) 

14. (Currently amended) Network apparatus for detection of server-like 
devices within a network, said apparatus comprising means for determining a respective 
ingress to egress network traffic ratio for at least some of the devices, and means for 
selecting the server-like devices on the basis of each determined ratio or a figure derived 
from each determined ratio , said selecting means including means for selecting those 
devices having a value of said determined ratio above a selected value, said selected 
value providing a cut-off point beyond which all devices are considered as exhibiting 
server-like behavior. 
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15. (Previously presented) Apparatus as claimed in claim 14 in which 
each server-like device is connected to a port of another device and the ingress to egress 
network traffic ratio is determined by determining network traffic through said port. 

16. (Original) Apparatus as claimed in claim 15 in which said network 
traffic through said port is determined using SNMP. 

17. (Cancelled) 

18. (Currently amended) Apparatus as claimed in claim 14 [[17]] including 
means for ranking the devices in order of their determined ratios. 

19. (Original) Apparatus as claimed in claim 18 including means for 
determining discontinuities in the values of the determined ratios of the ranked devices. 

20. (Previously presented) Apparatus as claimed in claim 18 including 
means for nominally plotting the determined ratios of the devices against the ranked 
devices and deriving a second derivative of a resulting ordered ratio graph, and means for 
using the second derivative to select the server-like devices. 

21. (Previously presented) Apparatus as claimed in claim 19 including 
means for nominally plotting the determined ratios of the devices against the ranked 
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devices and deriving a third derivative of a resulting ordered ratio graph, and means for 
using second and third derivatives to select the server-like devices. 

22. (Previously presented) Apparatus as claimed in claim 21 including 
means for using second and third derivatives to divide the devices into groups and 
selecting one or more of the groups of devices as server-like devices. 

23. (Previously presented) Apparatus as claimed in claim 22 including 
means for dividing the devices into groups by determining boundaries of the groups as 
points where the second derivative is zero and the third derivative is less than zero. 

24. (Cancelled) 
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